app.vercel.exploitwatch-kappa/exploitwatch
https://exploitwatch-kappa.vercel.app/api/mcp ↗
Description
Check dependencies against CISA's real Known Exploited Vulnerabilities feed.
What our measurements say
app.vercel.exploitwatch-kappa/exploitwatch is a remote MCP server published at exploitwatch-kappa.vercel.app. It has been probed 6 times since 9/14/2026. It answered in 6 of them (100.0%), a near-uninterrupted record. Median response time is 328 ms, placing it among the faster endpoints. It offers a narrow, focused set of 1 tools. On the protocol side it still runs 2025-11-25 and has not moved to the newer spec.
Agent readability score
Can an LLM agent pick the right tool here — names, descriptions and parameter clarity are assessed.
Agent readability score
Strengths
- Tool name 'check_kev' implies a KEV-related check action
- Description clearly explains usage context and output format
- Single parameter with clear type and required status
Weaknesses
- Tool name abbreviates 'KEV' without full explanation
- Parameter 'dependencies' lacks format examples (e.g., versioning, case sensitivity)
- No error handling or constraint documentation in description
check_kev— Parameter 'dependencies' lacks format specification detailscheck_kev— Tool name abbreviation 'KEV' not fully explained
Verdict
Event narrative
Risk: low
- 2026-09-14T04:24:59.037Z — No change in era, complianceScore, or smokeOk · Stable configuration with no detected issues
- 2026-09-14T14:41:53.703Z — No change in era, complianceScore, or smokeOk · Continued stable operation with no new alerts
Advice
Schema compliance
tools/list structure, inputSchema validity, and a functional smoke test — the components of the 0-100 score.
- tools/list schema valid
- inputSchema is valid JSON Schema
- Smoke test not run this round
- Cold-start: cold 146ms → warm 149ms (penalty 0ms)
Tools
Tools the server advertised in the latest measurement — measured, not catalog-claimed.
check_kevCheck a comma-separated list of software dependency/product names (e.g. 'lodash, openssl, apache struts') against CISA's real, public Known Exploited Vulnerabilities (KEV) catalog. Returns any current matches with the CVE ID, description, date added, and known ransomware use -- grounded in CISA's live feed, not a guess. Useful for triaging whether a project's dependencies include anything under active exploitation right now.
dependenciesstringrequired
Availability history
Event log
Derived by comparing consecutive probes — changes in era, protocol version, build and reachability.
- Added to watch — era: Legacy
Get your badge
Add this badge to your README — it updates automatically as measurements change.
[](https://mcpmetrics.io/servers/app-vercel-exploitwatch-kappa-exploitwatch)<a href="https://mcpmetrics.io/servers/app-vercel-exploitwatch-kappa-exploitwatch"><img src="https://mcpmetrics.io/badge/app.vercel.exploitwatch-kappa/exploitwatch/era.svg" alt="mcpmetrics"></a>You are seeing the last 7 days. Sign up for the full history. Which check failed and why is in the dashboard.
Sign up free to seeSimilar MCP servers
The catalog entries whose name and description are closest to this one, found with the same index the search box uses.
- CISA Known Exploited Vulnerabilities (kevwatch)a2awire.com
CISA KEV catalog: active-exploit alerts, hourly. Register in-session — free testnet funds.
- Cisa Kevgateway.pipeworx.io
CISA Known Exploited Vulnerabilities catalog
- Lenz Fact-Checklenz.io
Fact-check claims against independent sources — fast verdict or deep multi-step investigation.
- Earnings Feedearningsfeed.com
SEC filings and insider trades in real-time. 10-K, 10-Q, 8-K, Form 4, and company lookup.
- Real Real Genuinerealrealgenuine.com
Agent-native fashion marketplace. Browse, design, purchase NFTs, launch brands on Base.
- AVI RIFF check, file discardedagent-observatory-sensor.nolimit-observatory.workers.dev
AVI RIFF check, file discarded
Comments
Sign in to write a comment
No comments yet. Be the first.